Open Source

Every SSH Session Can Now Be Recorded Without You Ever Knowing

SSH-cast is a pair of Go binaries that records SSH sessions entirely from the local machine β€” no server-side component, no consent mechanism, no notification. For sysadmins, it’s an elegant audit solution. For everyone else, it means every SSH session you’ve ever had could have been silently captured without your knowledge. The tool exposes a structural flaw: when surveillance happens entirely on the observer’s side, the observed loses all agency.

The Terminal Is the Last Accessibility Blindspot. And It’s a Shameful One.

Google, Anthropic, and GitHub all independently built the same hidden fix for CLI accessibility: replacing animated spinners with plain text when a screen reader is detected. Yet no one shared the solution. This library finally makes that fix reusable, exposing a systemic blind spot in developer tooling.

I Made FFmpeg Memory-Safe With <2% Overhead. Then I Forgot the Link.

A developer creates a memory-safe FFmpeg with <2% overhead, then forgets to include the link. The real bottleneck in software security isn't technical overhead β€” it's the trust overhead that no one has automated. Every viral article needs a working link, a golden quote, and a side to take. This is the lesson from the most ironic HN post of the year.

I Rewrote Postgres in Rust. Now It’s Faster Than Postgres and ClickHouse.

A Rust rewrite of Postgres that ditches the legacy process-per-connection model, adopts threads and direct-to-binary codegen, and integrates Arrow/SIMD. The result: a single database that outperforms both Postgres and ClickHouse. The language is just the enablerβ€”the real breakthrough is architectural.

Your AI Coding Habit Is Wasting Millions of Liters of Water

An open-source tool called GrapeRoot just proved that token optimization in AI coding isn’t just about saving API costs β€” it’s a measurable climate action. 200 developers saved 60 million liters of water in months. Every token you waste in your AI assistant is real water evaporated in a data center. The AI industry’s biggest invisible externality is finally visible.

Google Is Holding Your Android Camera Hostage. Here’s How to Break It.

You bought a flagship Android phone for its massive camera sensor, but your photos still look like watercolor. The bottleneck isn’t your hardwareβ€”it’s Google’s proprietary software bloat. While Android is marketed as open, its camera pipeline is locked down to prioritize mass-market consistency over enthusiast quality. But one engineer decided to reverse-engineer the system and bypass the corporate roadblocks entirely.

Every Decentralized Search Engine Dies the Same Way. cl0q Won’t Be Different.

cl0q is the latest attempt at a decentralized, community-driven search engine β€” and it’s heading toward the same graveyard as every project before it. The technology isn’t the bottleneck. The bottleneck is that no one has ever solved the simplest question in decentralized search: why would a stranger donate their bandwidth for free? Hope is not an incentive structure, and idealism doesn’t scale.

I Forked MinIO and Deleted Code. Here’s Why Less Is Actually Faster.

Forking MinIO and stripping away its accumulated abstractions proves that raw performance gains come from deleting code, not adding it. While this lean alternative offers blistering speeds that break through latency ceilings, it forces a trade-off between raw speed and the ecosystem trust of the original open-source project. Sometimes, the most radical optimization is just a scalpel.

Your Open Source Stack Is a House of Cards. Here’s the Proof.

The sudden privatization of the SVGO repository reveals a dark truth about open source: your build pipeline is one click away from breaking. The license protects your rights, but not your access. If you rely on a single GitHub repo, you’re building on borrowed time. Here’s why decentralized archiving is the only real defense against the fragility of centralized open source.